PatchTheCVEinfoscan vulnerabilities and fixes
Recent CVEs affecting infoscan, with upgrade or downgrade steps. 3 tracked.
infoscan has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-08-08. Highest priority: CVE-2024-42408 (score 32/100).
- CVE-2024-42493 MEDIUM 5.3 DOWNGRADE Dorsett Controls InfoScan is vulnerable due to a leak of possible sensitive information through the response
- CVE-2024-42408 MEDIUM 5.3 DOWNGRADE The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system,
- CVE-2024-39287 MEDIUM 5.3 DOWNGRADE Dorsett Controls Central Server update server has potential information leaks with an unprotected file that c
FAQ
How do I fix infoscan vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is infoscan being exploited right now?
None of the tracked infoscan CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which infoscan CVE should I patch first?
CVE-2024-42408 currently ranks highest (32/100): The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system,.